Examples with ClientRegistrationException org.keycloak.client.registration.ClientRegistrationException used on opensource projects

Example 21 with ClientRegistrationException

use of org.keycloak.client.registration.ClientRegistrationException in project keycloak by keycloak.

the class FAPI1Test method testFAPIBaselineOIDCClientRegistration.

@Test
public void testFAPIBaselineOIDCClientRegistration() throws Exception {
    setupPolicyFAPIBaselineForAllClient();
    // Try to register client with clientIdAndSecret - should fail
    try {
        createClientDynamically(generateSuffixedName("foo"), (OIDCClientRepresentation clientRep) -> {
            clientRep.setTokenEndpointAuthMethod(OIDCLoginProtocol.CLIENT_SECRET_BASIC);
        });
        fail();
    } catch (ClientRegistrationException e) {
        assertEquals(ERR_MSG_CLIENT_REG_FAIL, e.getMessage());
    }
    // Try to register client with "client-jwt" - should pass
    String clientUUID = createClientDynamically("client-jwt", (OIDCClientRepresentation clientRep) -> {
        clientRep.setTokenEndpointAuthMethod(OIDCLoginProtocol.PRIVATE_KEY_JWT);
        clientRep.setJwksUri("https://foo");
    });
    ClientRepresentation client = getClientByAdmin(clientUUID);
    Assert.assertEquals(JWTClientAuthenticator.PROVIDER_ID, client.getClientAuthenticatorType());
    Assert.assertFalse(client.isFullScopeAllowed());
    // Set new initialToken for register new clients
    setInitialAccessTokenForDynamicClientRegistration();
    // Try to register client with "client-secret-jwt" - should pass
    clientUUID = createClientDynamically("client-secret-jwt", (OIDCClientRepresentation clientRep) -> {
        clientRep.setTokenEndpointAuthMethod(OIDCLoginProtocol.CLIENT_SECRET_JWT);
    });
    client = getClientByAdmin(clientUUID);
    Assert.assertEquals(JWTClientSecretAuthenticator.PROVIDER_ID, client.getClientAuthenticatorType());
    // Set new initialToken for register new clients
    setInitialAccessTokenForDynamicClientRegistration();
    // Try to register client with "client-x509" - should pass
    clientUUID = createClientDynamically("client-x509", (OIDCClientRepresentation clientRep) -> {
        clientRep.setTokenEndpointAuthMethod(OIDCLoginProtocol.TLS_CLIENT_AUTH);
    });
    client = getClientByAdmin(clientUUID);
    Assert.assertEquals(X509ClientAuthenticator.PROVIDER_ID, client.getClientAuthenticatorType());
    // Check the Consent is enabled, PKCS set to S256
    Assert.assertTrue(client.isConsentRequired());
    Assert.assertEquals(OAuth2Constants.PKCE_METHOD_S256, OIDCAdvancedConfigWrapper.fromClientRepresentation(client).getPkceCodeChallengeMethod());
}

Example 22 with ClientRegistrationException

use of org.keycloak.client.registration.ClientRegistrationException in project keycloak by keycloak.

the class InitialAccessTokenTest method create.

@Test
public void create() throws ClientRegistrationException, InterruptedException {
    ClientInitialAccessPresentation response = resource.create(new ClientInitialAccessCreatePresentation());
    reg.auth(Auth.token(response));
    ClientRepresentation rep = new ClientRepresentation();
    setTimeOffset(10);
    ClientRepresentation created = reg.create(rep);
    Assert.assertNotNull(created);
    try {
        reg.create(rep);
        Assert.fail("Expected exception");
    } catch (ClientRegistrationException e) {
        assertEquals(401, ((HttpErrorException) e.getCause()).getStatusLine().getStatusCode());
    }
}

Example 23 with ClientRegistrationException

use of org.keycloak.client.registration.ClientRegistrationException in project keycloak by keycloak.

the class InitialAccessTokenTest method createExpired.

@Test
public void createExpired() throws ClientRegistrationException, InterruptedException {
    ClientInitialAccessPresentation response = resource.create(new ClientInitialAccessCreatePresentation(1, 1));
    reg.auth(Auth.token(response));
    ClientRepresentation rep = new ClientRepresentation();
    setTimeOffset(10);
    try {
        reg.create(rep);
        Assert.fail("Expected exception");
    } catch (ClientRegistrationException e) {
        assertEquals(401, ((HttpErrorException) e.getCause()).getStatusLine().getStatusCode());
    }
}

Example 24 with ClientRegistrationException

use of org.keycloak.client.registration.ClientRegistrationException in project keycloak by keycloak.

the class InitialAccessTokenTest method createDeleted.

@Test
public void createDeleted() throws ClientRegistrationException, InterruptedException {
    ClientInitialAccessPresentation response = resource.create(new ClientInitialAccessCreatePresentation());
    reg.auth(Auth.token(response));
    resource.delete(response.getId());
    ClientRepresentation rep = new ClientRepresentation();
    try {
        reg.create(rep);
        Assert.fail("Expected exception");
    } catch (ClientRegistrationException e) {
        assertEquals(401, ((HttpErrorException) e.getCause()).getStatusLine().getStatusCode());
    }
}

Example 25 with ClientRegistrationException

use of org.keycloak.client.registration.ClientRegistrationException in project keycloak by keycloak.

the class OIDCClientRegistrationTest method testCIBASettings.

@Test
public void testCIBASettings() throws Exception {
    OIDCClientRepresentation clientRep = null;
    OIDCClientRepresentation response = null;
    clientRep = createRep();
    clientRep.setBackchannelTokenDeliveryMode("poll");
    response = reg.oidc().create(clientRep);
    Assert.assertEquals("poll", response.getBackchannelTokenDeliveryMode());
    // Test Keycloak representation
    ClientRepresentation kcClient = getClient(response.getClientId());
    Assert.assertEquals("poll", kcClient.getAttributes().get(CibaConfig.CIBA_BACKCHANNEL_TOKEN_DELIVERY_MODE_PER_CLIENT));
    // Create with ping mode (failes due missing clientNotificationEndpoint)
    clientRep.setBackchannelTokenDeliveryMode("ping");
    try {
        reg.oidc().create(clientRep);
        fail();
    } catch (ClientRegistrationException e) {
        assertEquals(ERR_MSG_CLIENT_REG_FAIL, e.getMessage());
    }
    // Create with ping mode (success)
    clientRep.setBackchannelClientNotificationEndpoint("https://foo/bar");
    response = reg.oidc().create(clientRep);
    Assert.assertEquals("ping", response.getBackchannelTokenDeliveryMode());
    Assert.assertEquals("https://foo/bar", response.getBackchannelClientNotificationEndpoint());
    // Create with push mode (fails)
    clientRep.setBackchannelTokenDeliveryMode("push");
    try {
        reg.oidc().create(clientRep);
        fail();
    } catch (ClientRegistrationException e) {
        assertEquals(ERR_MSG_CLIENT_REG_FAIL, e.getMessage());
    }
}